Original subtitles

Hello, everyone.

In this video, we will talk about fundamental questions.

Part two, we already have discussed up to 28 and let's start from 29.

So open source and license software, which one you are going to perform?

Definitely see here what is happening.

You know, the difference between open source and license software is that license software is keep

updating.

Right.

And that's very easy to track for any organization, whereas the open source, you don't know to whom

you are going to contact it and whether that will that will solve your problem or not.

But in licensed software, what is happening, you can easily take those people who can actually help

you.

So that's why license software is much better than open source software.

Now what is DNS?

So the end is nothing, but it's a domain name system turns domain names into IP addresses which browsers

use to load internet pages.

Well, let's say example you are writing WW dot google.com then definitely DNS is responsible.

Who there is a domain name and it is converting into the IP address because computer can't understand

domain.

Right.

Now how this works, you can actually go to this YouTube.com, this channel, and you can go through

this log Houdini's box, right?

So you can go through these two links and that will be much better.

And you will get to know that how actually it works.

Now, what is TLD?

So a top level domain domain.

Sorry.

So it is the most generic domain in the Internet heretical audience.

So what really is the final component of a domain name?

Let's let's take an example.

Right.

So if there is something you can say google.com, right?

So this dot com com.

Right.

So this com is one of the TLD that is a top level domain.

And let's say here is an example I have given developer dot mozilla dot org.

Right.

So that over there is one of the TLD.

So this is what top level domain.

What is name server names?

Our server is responsible to convert or translate the domain name into an IP addresses.

So names of let's say there is a WW dot dot Google dot com right.

So name server is responsible to convert WW dot google.com into 8.8.8.8.

Right.

So this is what we are.

We have name server.

Now canonical names a canonical name or we can say a typical C name is a type of domain name system

database record that indicates that domain name is the nickname or list for another domain name.

So let's take an example.

There is a website we have example dot com, right?

And that is the three subdomains the let's say w one example dot com w two examiner.com w three and

you are, you are the owner of that example dot com and you want all this sub domain should show the

example dot com whenever a user go through W one example dot com then that should be redirect to example

dot com.

Right.

So this is what can only claim that actually you are using some some other things, but once you will

enter into it, that is going to somewhere else from the same page.

So this is what can ethnical name which indicates that the domain name is the nickname or we can say

list for any other domain name.

Now what it is you find when you search IP domain for DNS lookup so you can search any any type of IP

right on DNS lookup, you can search for that and you will find out that here a WWE saw a name, so

you will find more details as well.

Right.

So now what exactly it is?

What is that a a will denotes, you know, the IPv4 address w w will denote you, it will show you IPv6

addresses.

So a it means start of authority.

So here you will get the administrator email ID when when was the last date when that IP was updated

or something else.

Right.

Name server.

Definitely you will get with the help of this DNS lookup, there will be more components as well, but

you will have to find out.

You will have to search on that DNS lookup because this question definitely ask many, many Indian interviewer

ask this question.

What is the speed generally?

We all know that it is used to assign the IP addresses to a host, basically in an organization or wherever.

Right.

And it works on the concept of Dora.

Dora means discovery.

Right.

Firstly, you are there is a client and server, so client will be discover.

Then server is going to offer an IP address.

Right.

And or.

You can say request R for request.

Again, client is going to request it.

Then server is acknowledging it to the client.

That's work.

That's how it works on concept to do.

But what is CV which authority generates?

CV?

CV is nothing but common vulnerabilities and exposures.

Whenever there is some some unique vulnerabilities or something, vulnerabilities happen and there is

no numbers of CV.

Then definitely there is an alternative which we call CV number authority, that is C and they assign

one of the unique CV to a particular vulnerability.

What is a look back at this?

Look back.

This is nothing.

It's your default routers.

You have the outer having the IP 120 7.0.0.1, which is called a loopback address.

Generally, we use these these things to check out these IP protocols, whether it's working or not.

So packets sent to this address never reach the network, but that looked through the network interface

card only.

Now our difference between thread and process.

So a process is a program under execution, right?

That is an active program.

A thread is a lightweight process that can manage independently by scheduler.

So process definitely process requires more time for context switching as they are more heavy while

they are heavy because there are multiple threads in a process, there can be multiple threads, but

a thread is definitely a very single one.

So definitely it will take less time because it's very lightweight.

It.

Now what is the difference between trade and services?

So service is a component of Android, which performs long running operation in background.

I think we also have seen service in Windows as well, so you can search for that as well.

Now there is a OS level feature that allows you to do some operation in the background.

What is Kerberos?

Kerberos is very important.

Kerberos is the computer network authentication protocol that works on the basis of tickets to allow

nodes communicating over a non-secure network to prove their identity to one another in a second manner.

So let's let's take an example here.

You know, you might have heard or you might have seen.

So single sign on.

Right?

So what was the logic behind that?

Who is working behind that?

So so Kerberos is is behind that.

So and he is working it because Converse is responsible to authenticate for the third party that he's

the right person who is accessing the single sign on.

You might have seen what is zero x 18 or zero x 12 as well in Curve's authentication.

So now what exactly it is?

So zero access to extract client's credentials have been revoked.

It means account disabled, expired, may be logged out or maybe log on us and whatever the failure

code zero x 18, it means that the account was already disabled or logged out when the client attempted

to authenticate.

What is Colonel?

So Colonel is the essential center or you can say the the heart of the OS.

You can see the computer operating system.

It is the core that provides the basic services for all other parts of the West.

So it is the main layer between the West and hardware and it helps with the process of memory management.

File system, device control network.

A lab.

A lab generally works on both number three, eight, nine, and it is a tool for extracting the editing

data stored in Active Directory and other compatible directory service providers.

And each user account in an entity has several attributes such as the, you know, the user full name

and email address, exact TikTok star.

Sorry.

So now what is salted hash now?

Why?

We are using salt.

Salted hash.

We already have the hash.

Well, hash can be cracked with the help of a rainbow table, maybe with the help of collisions.

So that's why we are adding some extra you can say extra data.

So the exact character in the hashes so that it can be secure.

What is a brute force attack?

How you will mitigate it.

So it tries various combination.

Maybe there will be a list of users and password and it will repeatedly use it until and unless it is

getting so this repetitive action is like an army attacking a food.

So mitigation, what is the mitigation?

You can limit the login attempts, right?

You can enable do two factor authentication.

You can use CAPTCHAs and you can also block the malicious IP, what are encoding, hashing and encryption.

So encoding is nothing but it convert the data into the desired format required for exchange between

the different system.

Let's say for example, base64 hashing.

So hashing is nothing, but it means the integrity of a message that we have already talked about this

and we also talked about the encryption that it ensures the data is secure and one need is our digital

verification code for image in order to open it or access it.

So it it shows the confidentiality.

It shows the integrity.

What are the PCB head reflects and what they do so senores escaped arrest and fell.

So segment synchronize right.

Or then means if there is an urgent package you can directly call it unless it shows that that the packet

has been raised.

Push.

We can push the packet reset.

Reset means the connection has been reset and failed means the connection has been terminated.

What is three way TCP handshaking?

So that's basically a very easy one.

If there is a client server.

So client is sending syn for a sign means it.

Initiating the communication right and server is sending Syn plus its initiation of communication.

Plus it has acknowledged that your client has sent the initiation request and then client is saying,

Yeah, I got it, and he's sending the packet and the communication is established.

What is villain, what your land means?

What what is the difference between VPN and villain?

So VPN it is related to remote access to a network with the secure and encrypted tunnel.

Basically there is an encryption encrypted tunnel through which we communicate from one one PC to the

server, maybe to the second or PC that is very secure.

And it saves the data from prying eyes while in transit and no one on the net can capture the packets.

Wheelin helps to group focus station that are not within the same location into the same broadcast domain,

logically segregates network without physical segregation with searches.

So it does not involve any encryption.

So here the data know.

So basically it's always in the local so it is not going to have the encryption.

Now the difference between proxy and VPN.

So there is a minor difference.

You know, VPN use the encryption, whereas proxy a just VPN is also hiding your IP.

A proxy is also hiding your IP but VPN using an encrypted tunnel through which your communication is

happening, whereas a proxy not.

So this is what the basic difference between these two difference between reverse proxy and forward

proxy.

So the main difference between the two is that forward proxy is used by the client, right?

So let's say you are you are the client and server is not knowing your IP address.

Right.

And reverse proxy proxy is just a reverse of that says that server server having a particular IP and

he is using the proxy at.

But the client can't to know from which server he's actually getting the data.

So that's what we what proxy.

Now.

Cell versus steel is how SSL works.

Which one is better?

Well, you can say TLS is the elder brother of SSL because TLS is more secure.

SSL is a secure socket layer and TLS is.

You can say, okay, let's spell facility, check it SSL.

So it is a protocol that enables safe conversation between two or more patients.

It is designed to identify and verify that the person you are talking to on the other end is who they

save.

Say they are, right.

For example, let's say a stps that uses the cell.

And TLC is one of transport security, which is also one of the cryptographic protocol, and that provides

authentication data encryption between.

You can say server machines and application SSL is the predecessor to TLS and they can be used together.

So this is the whole process of SSL handshake process.

You can just read out these these things.

I'm not going to discuss these things because I have already written here.

And definitely less is more better than SSL.

Now, what is the difference between various forms and tools and malware?

So now let me clear it in a very short form.

Now, where virus can affect a particular system and it can, you know, it can make a replica of it

tool, whereas the warm can can have the tendency of virus, but it can affect the whole network as

well.

Now, TROs intrusion is one of the things in which that is legitimate things is going.

I mean, there is there will be some malware which is looks like a legitimate but it is not legitimate.

And for that for our chosen victim have to click somewhere, we have to click, then only the Trojan

is going to install, then it is going to work.

So for chosen we need a victim against the victim should have click on that.

Okay.

So there will be no self-replicating replicating?

Definitely.

Now, what is the chain of custody?

So for legal cases, the data device needs to be integrated.

Hence any access need to be undocumented.

Who, what, when and why?

Compromise in this process can cause legal issues for the parties involved.

So generally, if let's say, if there is some something happened in your office and there is some data,

then they can take that laptop in the chain of custody.

They will investigate all those things.

So this is what we call chain of custody.

So that's it, guys.

In this, we have covered the whole fundamental questions, which we have, which I have seen in many

interviews, which I have talked to my junior and my senior, and they have helped me in that to making

this course, making this whole 55 questions solve related to fundamental questions.

So that's in this video and we'll meet in next video with the model questions.

Bye bye.